VYPR

CVEs

342,869 total · page 6585 of 6,858

AllCriticalHighKEV
  • CVE-2005-3254Oct 18, 2005
    Nathan Neulinger
    Cgiwrap
    risk 0.00cvss —epss 0.03

    The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be…

  • CVE-2005-3255Oct 18, 2005
    Debian
    php-cgiwrap
    risk 0.00cvss —epss 0.02

    The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs.

  • CVE-2005-3256Oct 18, 2005
    Enigmail
    Enigmail
    risk 0.00cvss —epss 0.02

    The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.

  • CVE-2005-3120CriOct 17, 2005
    Lynx
    Lynx
    risk 0.69cvss 9.8epss 0.23

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

  • CVE-2005-3250Oct 17, 2005
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference.

  • CVE-2005-3251Oct 17, 2005
    Gallery Project
    Gallery
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.

  • CVE-2005-3238Oct 14, 2005
    Sun Corporation
    Solaris
    risk 0.00cvss —epss 0.00

    Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors.

  • CVE-2005-3239Oct 14, 2005
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.04

    The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.

  • CVE-2005-2661Oct 14, 2005
    Up Imapproxy
    Up Imapproxy
    risk 0.04cvss —epss 0.12

    Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.

  • CVE-2005-2967Oct 14, 2005
    Xine
    Xine Lib
    risk 0.04cvss —epss 0.10

    Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.

  • CVE-2005-3194Oct 14, 2005
    Estsoft
    Alzip
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive.

  • CVE-2005-3196Oct 14, 2005
    Planet
    Fgsw2402rs
    risk 0.00cvss —epss 0.00

    Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges.

  • CVE-2005-3197Oct 14, 2005
    Webroot Software
    Desktop Firewall
    risk 0.00cvss —epss 0.01

    Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.

  • CVE-2005-3198Oct 14, 2005
    Webroot Software
    Desktop Firewall
    risk 0.00cvss —epss 0.00

    Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands.

  • CVE-2005-3199Oct 14, 2005
    Knusperleicht
    Faq
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly via the (1) txtLogin and (2) txtPassword parameters.

  • CVE-2005-3200Oct 14, 2005
    Utopia Software
    News Pro
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the sitetitle parameter in header.php and (2) the version and (3) query_count parameters in footer.php.

  • CVE-2005-3201Oct 14, 2005
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter.

  • CVE-2005-3202Oct 14, 2005
    Oracle Corporation
    HTML Db
    risk 0.04cvss —epss 0.11

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters.

  • CVE-2005-3203Oct 14, 2005
    Oracle Corporation
    HTML Db
    risk 0.00cvss —epss 0.01

    The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.

  • CVE-2005-3204Oct 14, 2005
    Oracle Corporation
    XML DB
    risk 0.05cvss —epss 0.21

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.

  • CVE-2005-3205Oct 14, 2005
    Oracle Corporation
    Database Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.

  • CVE-2005-3206Oct 14, 2005
    Oracle Corporation
    Database Server
    risk 0.05cvss —epss 0.22

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.

  • CVE-2005-3207Oct 14, 2005
    Oracle Corporation
    Forms
    risk 0.05cvss —epss 0.20

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.

  • CVE-2005-3208Oct 14, 2005
    Aenovo
    Aenovo
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error…

  • CVE-2005-3209Oct 14, 2005
    Aenovo
    Aenovo
    risk 0.00cvss —epss 0.00

    Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.

  • CVE-2005-3210Oct 14, 2005
    Kaspersky Lab
    Anti Virus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as…

  • CVE-2005-3211Oct 14, 2005
    Bitdefender
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as…

  • CVE-2005-3212Oct 14, 2005
    Eset
    Nod32 Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3213Oct 14, 2005
    FRISK Software
    F Prot Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3214Oct 14, 2005
    Alwil
    Avast Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3215Oct 14, 2005
    Avira
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3216Oct 14, 2005
    Sophos
    Anti Virus
    risk 0.00cvss —epss 0.05

    Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3217Oct 14, 2005
    Symantec
    Antivirus Scan Engine
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3218Oct 14, 2005
    Drweb
    Dr.web Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3219Oct 14, 2005
    Avira
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3220Oct 14, 2005
    Norman
    Norman Virus Control
    risk 0.00cvss —epss 0.03

    Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products…

  • CVE-2005-3221Oct 14, 2005
    Fortinet
    Fortinet Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3222Oct 14, 2005
    Virusblokada
    Vba32 Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3223Oct 14, 2005
    Rising Global
    Rising Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3224Oct 14, 2005
    Avira
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3225Oct 14, 2005
    Etrust
    eTrust-Iris
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened…

  • CVE-2005-3226Oct 14, 2005
    Arcavir
    Arcavir Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3227Oct 14, 2005
    Avira
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and…

  • CVE-2005-3228Oct 14, 2005
    Ikarus
    Anti.virus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3229Oct 14, 2005
    ClamAV
    Clamav
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3230Oct 14, 2005
    Panda Project
    Panda Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3231Oct 14, 2005
    Cat
    Quick Heal
    risk 0.01cvss —epss 0.14

    Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and…

  • CVE-2005-3232Oct 14, 2005
    Thehacker
    Thehacker
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and…

  • CVE-2005-3233Oct 14, 2005
    Trustix
    Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar…

  • CVE-2005-3234Oct 14, 2005
    Avast\!
    Avg Antivirus
    risk 0.00cvss —epss 0.02

    Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as…